CVE-2026-94056

概要

参考情報

• lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html · Vendor Advisory

exim のその他の脆弱性

• CVE-2026-94057中 5.3Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data…
• CVE-2026-94055中 5.3Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
• CVE-2026-94054中 5.3Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
• CVE-2026-66141高 7.8Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.
• CVE-2026-66140高 7.8Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments…